Authorization Flaw in NeuVector's Admin Account

CVE-2025-8077

What is CVE-2025-8077?

A security flaw exists in NeuVector's versions up to and including 5.4.5, where a static string serves as the default password for the built-in 'admin' account. Without alteration of these credentials post-deployment, any component within a network-accessible workload can exploit the prevailing default credentials to gain an authentication token. This token provides the ability to make requests and manipulate resources via NeuVector APIs, potentially compromising the security of the entire system.

References